$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d54493d3-f2ca-373f-ba26-5ddca741b0f4.roa File: d54493d3-f2ca-373f-ba26-5ddca741b0f4.roa (raw, json) Hash identifier: qbfrlqrdKhrR9n7lab6gnYk02935viDsVAhx4TeXl1Q= Subject key identifier: D0:ED:58:F5:B5:7A:36:7B:7D:08:A4:0F:A0:4D:00:07:71:5C:FB:01 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584D55BB900253C9FF6BDB5A42C0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d54493d3-f2ca-373f-ba26-5ddca741b0f4.roa Signing time: Mon 30 Mar 2026 01:00:23 +0000 ROA not before: Mon 30 Mar 2026 01:00:23 +0000 ROA not after: Sun 28 Jun 2026 01:00:23 +0000 asID: 33490 IP address blocks: 67.189.106.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:55:bb:90:02:53:c9:ff:6b:db:5a:42:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Mar 30 01:00:23 2026 GMT Not After : Jun 28 01:00:23 2026 GMT Subject: CN=49c3b484-714d-44b4-b773-2610d2725b82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:cc:73:59:2b:43:8c:a1:13:3b:d4:7b:c5:52: b3:ec:4a:39:16:ad:66:2e:81:22:fd:6e:86:09:6d: 85:1a:ce:bc:56:eb:07:7a:e9:75:ee:60:24:4a:ed: 88:09:26:8d:1e:fe:2e:bd:ed:16:e2:2c:6d:4d:05: b7:9c:5f:43:84:b6:98:d5:5a:1f:54:d4:4c:cf:ae: a8:6e:c1:f4:b9:2e:3b:ed:93:1d:7b:ae:ea:0e:1b: 76:e8:8e:97:d1:ab:5a:6e:0d:55:86:9c:f3:03:64: b6:d2:7a:68:d2:93:f1:94:45:a9:cf:2c:95:f5:24: 80:d6:63:a2:ca:a1:60:ac:65:31:56:5b:4b:80:c4: 5d:4a:95:ac:14:44:6e:54:58:24:a2:e8:83:e4:ce: e1:b9:f6:c0:f1:83:70:42:11:5d:02:11:74:2a:05: fc:e6:1d:f1:e4:97:8d:28:70:2b:4a:7a:62:a9:80: 24:a1:d4:be:f3:91:bb:14:c4:b1:b8:1c:01:31:be: 79:d6:d6:14:0b:b1:64:8c:29:55:82:58:66:cb:46: 10:13:b6:20:a0:69:a1:ad:ca:eb:ed:26:3e:4a:90: 35:e0:6c:44:e0:58:46:06:3b:8d:c5:7d:8d:64:7e: 35:39:31:01:d0:56:72:6f:9d:5f:21:8d:c5:88:8e: 18:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:ED:58:F5:B5:7A:36:7B:7D:08:A4:0F:A0:4D:00:07:71:5C:FB:01 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d54493d3-f2ca-373f-ba26-5ddca741b0f4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 67.189.106.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d0:a5:ef:87:e8:50:a7:47:6d:7f:56:af:87:0e:b7:2b:b6:2b: b0:43:9e:a5:64:42:80:15:17:f5:b6:3d:04:0e:53:e3:d1:20: 8c:3b:51:dc:2e:e3:a7:39:95:c6:1f:8f:c1:da:61:1a:d1:b9: 83:cc:3b:6f:c3:6e:b5:8e:56:3f:08:28:64:1e:e4:7f:26:3d: d5:79:b8:0b:aa:d3:69:df:0e:89:30:e2:25:ec:0a:fe:c9:3c: 6d:5e:19:cd:14:9e:50:68:f4:98:fa:32:42:43:ba:cc:e9:5e: b6:48:b6:97:f5:7f:9e:a0:78:13:35:c9:07:ea:56:f2:ab:91: b7:9c:a3:39:82:77:1f:23:b2:84:b9:82:5c:c3:8b:29:03:6b: 3e:e6:b1:9c:cd:b1:19:fd:62:e8:a3:11:55:56:27:69:02:f3: 2d:78:82:ef:1b:5a:07:57:12:7a:31:54:94:92:09:ae:93:5a: 25:a5:9f:1b:74:1e:85:db:21:d4:ae:3a:0f:9a:46:5b:65:74: 18:31:68:43:a8:ad:ac:00:ed:da:29:ed:d4:d9:64:58:e1:8d: 36:2d:ac:ed:5b:e9:dc:d8:cc:ea:5c:52:34:c7:3e:85:93:67: 08:a0:36:04:6e:64:02:46:11:93:f9:8f:c5:b8:89:b2:7a:77: 2e:88:7f:a9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1Vu5ACU8n/a9taQsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDMzMDAxMDAyM1oXDTI2MDYyODAxMDAyM1owLzEtMCsGA1UEAxMk NDljM2I0ODQtNzE0ZC00NGI0LWI3NzMtMjYxMGQyNzI1YjgyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgMxzWStDjKETO9R7xVKz7Eo5Fq1mLoEi/W6G CW2FGs68VusHeul17mAkSu2ICSaNHv4uve0W4ixtTQW3nF9DhLaY1VofVNRMz66o bsH0uS477ZMde67qDht26I6X0atabg1VhpzzA2S20npo0pPxlEWpzyyV9SSA1mOi yqFgrGUxVltLgMRdSpWsFERuVFgkouiD5M7hufbA8YNwQhFdAhF0KgX85h3x5JeN KHArSnpiqYAkodS+85G7FMSxuBwBMb551tYUC7FkjClVglhmy0YQE7YgoGmhrcrr 7SY+SpA14GxE4FhGBjuNxX2NZH41OTEB0FZyb51fIY3FiI4YkQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNDtWPW1ejZ7fQikD6BNAAdxXPsBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZDU0NDkzZDMtZjJjYS0z NzNmLWJhMjYtNWRkY2E3NDFiMGY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBQ71qMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANCl74foUKdHbX9Wr4cOtyu2K7BDnqVkQoAVF/W2PQQOU+PRIIw7Udwu 46c5lcYfj8HaYRrRuYPMO2/DbrWOVj8IKGQe5H8mPdV5uAuq02nfDokw4iXsCv7J PG1eGc0UnlBo9Jj6MkJDuszpXrZItpf1f56geBM1yQfqVvKrkbecozmCdx8jsoS5 glzDiykDaz7msZzNsRn9YuijEVVWJ2kC8y14gu8bWgdXEnoxVJSSCa6TWiWlnxt0 HoXbIdSuOg+aRltldBgxaEOorawA7dop7dTZZFjhjTYtrO1b6dzYzOpcUjTHPoWT ZwigNgRuZAJGEZP5j8W4ibJ6dy6If6k= -----END CERTIFICATE-----Generated at Fri Apr 17 19:36:32 2026 by rpki-client